Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E201B0E53E11EF8C9E8899762E951A.roa
File: 74E201B0E53E11EF8C9E8899762E951A.roa (raw, json)
Hash identifier: lpc7IfKd8gVG/o4t/E7r6RYsKjLfhD3U10+0YfSSUj0=
Subject key identifier: 3F:C1:4B:25:73:18:B7:58:F3:7F:AF:7C:1D:CC:25:9B:E3:39:C5:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E201B0E53E11EF8C9E8899762E951A.roa
Signing time: Fri 07 Feb 2025 10:29:48 +0000
ROA not before: Fri 07 Feb 2025 10:29:45 +0000
ROA not after: Sat 13 Dec 2025 10:29:45 +0000
asID: 984
IP address blocks: 156.230.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72959 (0x11cff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:29:45 2025 GMT
Not After : Dec 13 10:29:45 2025 GMT
Subject: CN=67a5e09c-a76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:4e:b2:5e:68:03:69:6e:42:10:16:b1:56:
c0:c6:8d:e3:e0:3e:09:97:cb:dc:0f:f8:d0:8e:f8:
af:61:5d:94:28:a7:34:53:f8:b2:33:14:75:1e:9b:
91:a6:3f:d1:fa:56:4e:9f:e4:f5:60:ad:34:5b:b8:
b4:f3:77:3e:bf:95:69:83:4d:3b:73:d2:3d:57:94:
ef:2f:ca:2a:a1:02:dc:33:ee:47:2e:cb:d4:ad:2a:
5a:ae:2a:3a:f1:ff:f0:13:1c:d2:7d:a9:6d:cd:73:
4f:f5:fc:e2:1b:c8:a6:f0:24:91:43:64:3e:c5:b0:
08:e9:44:32:1e:00:a1:cd:b5:93:9f:0c:01:31:fb:
87:61:73:eb:ea:77:7e:98:83:f9:5a:e8:33:3e:55:
21:41:59:c1:f8:0d:2f:9b:00:17:b4:5c:96:b4:77:
4c:84:ae:cf:7a:34:39:8e:95:69:87:10:04:58:54:
b1:22:c8:24:d3:1f:53:d9:c3:65:44:54:3f:06:28:
14:80:88:31:36:24:7a:dc:23:a5:70:50:cd:99:0b:
95:f3:a9:2e:af:c1:13:97:d7:51:06:8c:bc:77:16:
06:1e:3a:1c:9f:32:bc:be:56:d6:44:ff:aa:c0:dd:
2b:5d:34:d4:70:1c:3e:75:d8:e1:b4:ae:65:17:69:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C1:4B:25:73:18:B7:58:F3:7F:AF:7C:1D:CC:25:9B:E3:39:C5:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E201B0E53E11EF8C9E8899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.157.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f2:12:4c:fb:46:ff:0d:97:3f:b5:09:33:f7:62:0e:34:74:
40:4c:0a:9c:26:00:6a:c8:05:e2:7f:38:37:0a:0a:9c:48:49:
7a:26:27:56:34:4b:ad:6d:d4:98:d6:0a:26:cd:78:d4:76:4a:
dc:79:05:51:a1:52:f5:c7:fb:bb:64:bd:21:7a:b1:e6:9e:48:
66:6e:be:75:21:1a:93:a1:77:b3:75:9f:ec:c3:9c:a0:e8:9a:
e7:71:8f:54:b2:7f:d0:64:b6:53:db:15:0a:b3:33:0e:83:83:
fe:73:fa:9a:11:7e:4a:ad:7f:1e:c5:59:85:69:30:fe:70:28:
1f:0f:4e:23:e0:0f:db:95:2e:d5:2f:d5:33:90:fb:43:dd:fb:
34:0e:71:89:f7:83:06:19:bd:ab:ee:da:4b:99:82:b5:c2:0a:
c1:a4:63:68:95:67:41:e9:5e:18:72:b9:86:ae:8b:8a:69:58:
5d:1d:54:f2:84:45:5b:f1:29:bc:f5:cb:8e:66:b2:19:36:62:
ea:d7:ad:fa:4c:4a:37:8a:91:49:7a:12:51:24:f3:68:75:d2:
b9:a3:15:39:d5:d4:db:83:37:91:65:37:d4:69:67:02:ec:d8:
40:3d:67:c5:a6:05:cb:7f:94:98:f8:39:fb:e4:bd:06:1e:07:
d4:df:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:04 2025 by rpki-client